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In the Claims ; 

This listing of claims will replace all prior versions, and listing, of claims in the 
application: 

1 . (Currently Amended) A method of determining autonomous system volume 
data, comprising: 

collecting data flow statistics for at least one router; 

collecting routing information base data for each of the at least one route r, the routing 
information base data identifying at least one selected autonomous system path for a 
destination address ; and 

for each destination address identified in the data flow statistics, correlating one of the 
data flow statistics corresponding to the destination address to each autonomous system 
included in the at least one selected autonomous system path corresponding to the destination 
address corr e lating th e routing information bas e data and th e data flow statistics , thereby 
yielding autonomous system volume data. 

2. (Original) The method of claim 1, further comprising, following the step of 
correlating: 

analyzing the autonomous system volume data; and 
reporting results of the step of analyzing. 
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3. (Original) The method of claim 1, wherein the step of collecting the data flow 
statistics for the at least one router comprises: 

collecting the data flow statistics during a pre-determined time interval; and 
aggregating the data flow statistics by destination address. 

4. (Original) The method of claim 1, wherein the step of collecting the data flow 
statistics for the at least one router comprises using a data flow collection program. 

5. (Canceled) 

6. (Original) The method of claim 1, wherein the step of collecting the routing 
information base data for the at least one router comprises taking a snapshot of border 
gateway protocol data. 

7. (Currently Amended) The method of claim 1, wherein the step of correlating 
th e routing information bas e data and tho data flow statistics comprises: 

identifying a destination address in the data flow statistics; 
identifying a prefix corresponding to the destination address; 
identifying an autonomous system path corresponding to the prefix; 
correlating a data flow statistic corresponding to the destination address to each 
autonomous system included in the autonomous system path. 
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8. (Currently Amendedl) The method of claim 1, wherein the step of correlating 
th e routing information bas e data and tho data flow statistics comprises: 

identifying a destination address in the data flow statistics; and 

correlating a data flow statistic corresponding to the destination address to each 

autonomous system included in an autonomous system path corresponding to the destination 

address. 

9. (Canceled). 

10. (Currently Amended) The method of claim 7, wherein the step of correlating 
th e routing information bas e data and tho data flow statistics comprises repeating the steps of 
claim 7 for each destination address of the data flow statistics of each of the at least one 
router. 

1 1 . (Currently Amended) The method of claim 8, wherein the step of correlating 
th e routing information bas e data and the data flow statistics comprises repeating the steps of 
claim 8 for each destination address of the data flow statistics of each of the at least one 
router. 



12. (Canceled). 
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13. (Original) The method of claim 1, further comprising: 
computing at least one synthetic autonomous system path; and 

reporting autonomous system volume data of the at least one synthetic autonomous 
system path, 

14. (Currently Amended) A system for determining autonomous system volume 
data, comprising: 

a data flow collection node adapted to collect data flow statistics from at least one 

router; 

a routing information base collection node adapted to periodically collect routing 
information base data from the at least one router; and 

a correlation node adapted to correlate the routing information base data and the data 
flow statistics and thereby yield autonomous system volume data. 

15. (Original) The system of claim 14, further comprising a reporting node 
adapted to analyze and report on the autonomous system volume data. 

16. (Original) The system of claim 14, wherein the correlation node is adapted to: 
identify a destination address in the data flow statistics; 

identify a prefix corresponding to the destination address; 
identify an autonomous system path corresponding to the prefix; 
correlate a data flow statistic corresponding to the destination address to each 
autonomous system included in the autonomous system path. 
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17. (Original) The system of claim 14, wherein the correlation node is adapted to: 
identify a destination address in the data flow statistics; and 

correlate a data flow statistic corresponding to the destination address to each 
autonomous system included in an autonomous system path corresponding to the destination 
address. 

18. (Canceled). 

19. (Original) The system of claim 14, wherein at least two of the data collection 
node, the routing information base collection node, and the correlation node are the same 
node. 

20. (Original) The system of claim 14, wherein the data flow collection node, the 
routing information base collection node, and the correlation node are each a separate node. 

21. (Original) The system of claim 14, further comprising a reporting node 
adapted to report autonomous system volume data on at least one synthetic autonomous 
system path. 
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22. (Currently Amended) A method of generating autonomous system volume 
data comprising: 

detecting at least one first data flow having a first volume and directed toward a first 
destination address using 

identifying a first selected autonomous system path in a routing information base over 
which said first data flow is routed : and 

for each autonomous system in the first selected autonomous system path, 
incrementing a counter by an amount indicating the first volume. 

23. (Original) The method of claim 22, further comprising: 

detecting at least one second data flow having a second volume and directed toward a 
second destination address using a second selected autonomous system path in the routing 
information base; 

for each autonomous system in the second selected autonomous system path, 
incrementing a counter by an amount indicating the second volume; and 

wherein at least one autonomous system in the routing information base is updated 
before the detecting of the at least one second data flow. 

24. (Original) The method of claim 22, further comprising: 

providing counter data resulting from the incrementing of the counter during a 
specified time period; 

analyzing the counter data; and 
reporting results of the step of analyzing. 
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25. (Currently Amended) A method of generating autonomous system volume 
data comprising: 

detecting at least one first data flow having a first volume and directed toward a first 
destination address; 

identifying a first selected autonomous system path in a routing information base over 
which said first data flow is routed; and 

for each autonomous system in a first synthetic autonomous system path constructed 
using the at least one first selected autonomous system path , incrementing a counter by an 
amount indicating the first volume. 

26. (Currently Amended) The method of claim 25, further comprising: 
detecting at least one second data flow having a second volume and directed toward a 

second destination address using a second selected autonomous system path in the routing 
information base ; 

for each autonomous system in s second synthetic autonomous system path 
constructed using the second selected autonomous system path, incrementing a counter by an 
amount indicating the second volume; and 

wherein at least one autonomous system in a the routing information base is updated 
before the detecting of the at least one second data flow. 
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27. (Original) The method of claim 25, further comprising: 
providing counter data resulting from the incrementing of the counter during a 
specified time period; 

analyzing the counter data; and 
reporting results of the step of analyzing. 

28-30. (Canceled). 
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